$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa File: 8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa (raw, json) Hash identifier: jdyiD8N147SdYhj06K26uyK/6o+MX7Ml+eN24eUAiBg= Subject key identifier: 8B:38:62:E1:6A:99:79:72:A5:94:C6:F5:77:DB:1B:8F:01:25:4E:95 Certificate issuer: /CN=5e2da88f-6029-42b9-b598-2623343a3150 Certificate serial: 010D0C9F4328584B7C875F2286F880AD872E2F40 Authority key identifier: 7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa Signing time: Sat 11 Oct 2025 13:00:38 +0000 ROA not before: Sat 11 Oct 2025 13:00:38 +0000 ROA not after: Fri 09 Jan 2026 14:00:38 +0000 asID: 68 IP address blocks: 128.165.0.0/16 maxlen: 16 130.55.0.0/16 maxlen: 16 138.98.0.0/16 maxlen: 16 141.111.0.0/16 maxlen: 16 192.12.184.0/24 maxlen: 24 192.12.208.0/24 maxlen: 24 192.52.70.0/24 maxlen: 24 192.65.95.0/24 maxlen: 24 204.121.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7c:87:5f:22:86:f8:80:ad:87:2e:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e2da88f-6029-42b9-b598-2623343a3150 Validity Not Before: Oct 11 13:00:38 2025 GMT Not After : Jan 9 14:00:38 2026 GMT Subject: CN=c2a58865-03b8-4ceb-a299-c082ae83fbe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7b:c7:8a:a1:14:25:6a:a2:72:39:7d:b6:63: 5e:d3:a2:f9:27:de:78:c7:99:8c:0f:ac:eb:3a:f5: 28:d8:58:49:cb:60:23:81:9f:40:dd:e1:13:a3:f9: e0:72:da:5d:c6:3a:47:c4:59:09:cb:70:5a:79:0b: c0:6f:53:09:79:a5:5a:83:80:4b:5c:70:e7:6a:26: 2d:64:42:8e:dd:7c:26:43:9e:58:4f:05:16:c9:1e: 07:75:b1:de:1d:67:6b:2d:87:1f:e2:5f:72:64:1f: 77:8b:66:55:5c:16:ea:b4:bb:d9:a9:ca:22:eb:6c: 99:e2:13:91:75:a1:23:14:ab:82:3d:4e:51:a1:7d: 19:c0:33:b0:97:48:f8:6f:56:76:4b:9f:a8:38:44: 6a:c1:c3:a8:41:d2:0f:40:53:8c:b2:da:ca:9b:d9: fc:9b:12:35:93:0f:f3:16:de:6b:10:e4:08:bb:55: 79:24:0e:0f:28:dd:20:5a:82:43:41:19:d4:52:b5: c2:7a:23:9c:c4:2c:e0:e8:0f:4e:8b:3b:89:aa:cf: e9:b7:d1:f6:f8:bb:ee:62:28:7c:e1:c1:8c:50:7e: 94:c7:33:1f:38:36:c6:60:5f:2c:9b:24:97:4b:12: 67:55:54:b3:b2:42:d4:94:ec:97:5b:81:ef:92:47: c0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:38:62:E1:6A:99:79:72:A5:94:C6:F5:77:DB:1B:8F:01:25:4E:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/8ab92467-1c0b-38eb-b930-aa4ad39e6ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150/5e2da88f-6029-42b9-b598-2623343a3150.crl X509v3 Authority Key Identifier: keyid:7C:B2:28:84:FD:D0:5B:14:8E:FD:87:34:FD:A6:13:FA:CC:39:26:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5e2da88f-6029-42b9-b598-2623343a3150.cer sbgp-ipAddrBlock: critical IPv4: 128.165.0.0/16 130.55.0.0/16 138.98.0.0/16 141.111.0.0/16 192.12.184.0/24 192.12.208.0/24 192.52.70.0/24 192.65.95.0/24 204.121.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:a1:e7:e7:4f:dc:05:43:34:06:db:24:88:1a:63:26:6b:eb: 61:b5:b1:88:4d:67:08:4e:69:db:8d:ce:87:2a:69:f9:90:28: c8:c2:b4:2c:1c:10:b4:1e:a1:c9:96:f0:9d:cd:0b:14:39:9f: c5:9e:74:46:5c:0e:48:05:9f:c6:3f:ba:54:ff:5f:ae:b5:b4: f3:02:f3:a6:a2:97:09:71:c0:fe:58:c7:84:df:a0:a8:05:74: 24:4c:66:a2:4c:f4:a2:52:4e:d9:dd:53:78:5d:64:b2:7d:b1: cb:02:61:f6:68:79:75:d7:de:8c:56:7e:00:9d:7d:9a:b5:ac: e2:90:77:22:be:38:cf:e6:a9:93:84:03:e5:1d:fe:b8:8d:3e: 1e:b0:73:f2:a8:b0:2b:68:da:50:c7:f6:4d:ac:05:0d:cc:15: de:08:80:24:74:b1:58:b3:5c:84:31:9a:aa:8c:88:e6:bb:ba: 00:92:b2:d6:d3:6d:ce:31:ef:87:a2:3c:73:f9:ca:c6:f6:d8: 31:5c:18:51:9a:3c:19:8b:d0:63:dd:91:2c:62:76:58:9a:da: f5:30:0c:01:73:cf:b9:2e:f7:d2:5f:b7:c1:19:a8:13:4e:70: da:c7:d0:88:ba:c2:1d:c5:22:30:f7:e1:47:20:cb:77:80:ab: 78:e3:86:87 -----BEGIN CERTIFICATE----- MIIGbjCCBVagAwIBAgIUAQ0Mn0MoWEt8h18ihviArYcuL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUyZGE4OGYtNjAyOS00MmI5LWI1OTgtMjYyMzM0M2Ez MTUwMB4XDTI1MTAxMTEzMDAzOFoXDTI2MDEwOTE0MDAzOFowLzEtMCsGA1UEAxMk YzJhNTg4NjUtMDNiOC00Y2ViLWEyOTktYzA4MmFlODNmYmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3vHiqEUJWqicjl9tmNe06L5J954x5mMD6zr OvUo2FhJy2AjgZ9A3eETo/ngctpdxjpHxFkJy3BaeQvAb1MJeaVag4BLXHDnaiYt ZEKO3XwmQ55YTwUWyR4HdbHeHWdrLYcf4l9yZB93i2ZVXBbqtLvZqcoi62yZ4hOR daEjFKuCPU5RoX0ZwDOwl0j4b1Z2S5+oOERqwcOoQdIPQFOMstrKm9n8mxI1kw/z Ft5rEOQIu1V5JA4PKN0gWoJDQRnUUrXCeiOcxCzg6A9OizuJqs/pt9H2+LvuYih8 4cGMUH6UxzMfODbGYF8smySXSxJnVVSzskLUlOyXW4HvkkfAqwIDAQABo4IDgDCC A3wwHQYDVR0OBBYEFIs4YuFqmXlypZTG9XfbG48BJU6VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZTJk YTg4Zi02MDI5LTQyYjktYjU5OC0yNjIzMzQzYTMxNTAvOGFiOTI0NjctMWMwYi0z OGViLWI5MzAtYWE0YWQzOWU2Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWUyZGE4OGYtNjAyOS00MmI5LWI1 OTgtMjYyMzM0M2EzMTUwLzVlMmRhODhmLTYwMjktNDJiOS1iNTk4LTI2MjMzNDNh MzE1MC5jcmwwHwYDVR0jBBgwFoAUfLIohP3QWxSO/Yc0/aYT+sw5JrAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81ZTJkYTg4Zi02MDI5LTQyYjktYjU5OC0yNjIz MzQzYTMxNTAuY2VyMEoGCCsGAQUFBwEHAQH/BDswOTA3BAIAATAxAwMAgKUDAwCC NwMDAIpiAwMAjW8DBADADLgDBADADNADBADANEYDBADAQV8DAwDMeTBUBgNVHSAB Af8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFy aW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IB AQCCoefnT9wFQzQG2ySIGmMma+thtbGITWcITmnbjc6HKmn5kCjIwrQsHBC0HqHJ lvCdzQsUOZ/FnnRGXA5IBZ/GP7pU/1+utbTzAvOmopcJccD+WMeE36CoBXQkTGai TPSiUk7Z3VN4XWSyfbHLAmH2aHl1196MVn4AnX2atazikHcivjjP5qmThAPlHf64 jT4esHPyqLAraNpQx/ZNrAUNzBXeCIAkdLFYs1yEMZqqjIjmu7oAkrLW023OMe+H ojxz+crG9tgxXBhRmjwZi9Bj3ZEsYnZYmtr1MAwBc8+5LvfSX7fBGagTTnDax9CI usIdxSIw9+FHIMt3gKt444aH -----END CERTIFICATE-----Generated at Tue Oct 21 03:05:29 2025 by rpki-client